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FD-801 (Rev. 7-15-97) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 

To: D5 


Date; 02/13/2000 

Attn; Computer Investigations 
Unit, CIOS, NIPC 
Room 11719 


From; SAC, Boston 
Approved By ; 

Drafted By: I 

Case ID #; 288 -BS -NEW 



b6 

b7C 


Title; Siibject: FEDERATION OF RANDOM ACTIOl 

Victim: FIDELITY INVESTMENTS, OCCIDENTAL PETROLEUM 

DENIAL OF SERVICE ^ 

2/3/2000 


Type : 
Date : 




SUBMISSION: x Initial □ Supplemental □ Close^4 
CASE OPENED: _2_/_14_/_00_ 

CASE CLOSED: 

□ No action due to state/local prosecution 
(Name/Number 




□ USA declination 

□ Referred to Another Federal Agency 

(Name/Number: 


J □ Placed in unaddressed work 


□ Closed administratively 

□ Conviction 

COORDINATION: FBI Field Office 

Government Agency 
Private Corporation 


Company name/Govemment agency: Fidelity Investments 

Address/location: 82 Devonshire Street, Boston, MA 

Purpose of System: Web Server 

Highest classification of information stored in system: U nclassified 





hS 

hlC 






To: D5 Prom: SAC, Boston 

Re: 288-BS-NEW, 2/13/2000 


System Data: 

Hardware/configuration (CPU): 

Operating System: 

Software: 

Security Features: 

Security Software Installed: □ yes (identify ) □ no 

Logon Warning Banner: □ yes □ no 

INTRUSION INFORMATION 

Access for intrusion: □ Internet connection □ dial-up number □ LAN (insider) 

If Internet: Internet address: ^ 

Network name: 


Method: 

Technique(s) used in intrusion: 


(list provided) 


Path of intrusion: 


Subject: 


Alias(s): 

Group Affiliation: 
Employer: 


Known Accomplices: 
Equipment used: 


addresses: 1. 

2. 

3. 

4. 5. 

country: 1. 

2. 

3. 

4. 5. 

facility: 1. 

2. 

3. 

4. 5. 

Age: 



Race: 

Sex: 



Education: 


Motive: 


Hardware/configuration (CPU): 

Operating System: 

Software: 


Impact: 

Compromise of classified information: □ yes □ no 

Estimated number of computers affected: 

Estimated dollar loss to date: Undetermined 
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To: D5 From: SAC, Boston 

Re: 288-BS-NEW, 2/13/2000 


Category of Crime: 

Impairment: 

□ Malicious code inserted 
X Denial of service 

□ Destruction of information/software 

□ Modification of information/software 


Intrusion: 

□ Unauthorized access 

□ Exceeding authorized access 


Theft of Information: 

□ Classified information compromised 

□ Unclassified information compromised 

□ Passwords obtained 

□ Computer processing time obtained 

□ Telephone services obtained 

□ Application software obtained 

□ Operating software obtained 


REMARKS 

On 2/3/2000, Internet web servers-^elonging to Fidelity- 
Investments and Occidental Petroleum were^the targets of denial 
of service attacks . The attacks were against the search function 

of the compands— web,-,.s it es The-'-atta^ks orj-ginated from a site 

owned by the r"g^DERATI QN..Q F RAI JD01ll^A(yrjQIT..,.^Th attacks coincided 
with physical world protests~led the’ RAINFOREST ACTION 
NE^ORK . / 

Investigation is placing by Boston Division. 


288A-BS-86360 
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Special Agenl^ 
the Internet on Februa< 




5, 


conducted a search of 
2000 for inf ormation .regarding the 


Rainforest. .Action j^^;^ork and the^'Pederation o^^,^.R£ndom Action 
The results are att5ached. ^ 


'' 6S ' 
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Federation of Random Action 
ENGLISH:: 

The U'wa of the Colombian cloud forest are in 
a life-and-death struggle to protect their 
traditional culture and sacred homeland jfrom 
an oil project slated to begin on their land at 
anytime. 

The U'wa are adamantly opposed to the 
drilling and warn that the project will lead to 
an increase in violence as seen in other oil 
regions of Colombia. 

Despite this, Los Angeles-based Occidental 
Petroleum and the Colombian government 
continue to move forward with plans to drill. 

The Uwa have made a call for international 
support; now is the time for us to answer. 

FRENCH:: 

Les U'wa de la foret colombienne sont dans 
une lutte de la vie-et-mort pour proteger leur 
culture traditionnelle et patrie sacree contre 
un projet petrolifere prevu pour commencer 
sur leur terre n'importe quand. Les U'wa sont 
profondement opposes au forage et 
avertissent que le projet menera a une 
augmentation de violence comme vu dans 
d'autres regions petrolifere de la Colombie. 

En depit de ceci. La firme Occidental 
Petroleum basee a Los Angeles et le 
gouvemement colombien continuent a 
avancer avec des plans pour des forages. 

Les U'wa ont fait un appel pour un soutien 
international; c'est maintenant I'heure pour 
nous de repondre. 

For more informations / Pour plus d'informations(in 
english) 

DISCLAIMER 

FRA supports Uwa's campaign against Occidental 
Petroleum ( Oxy and CdnOxy ) 
and Rainforest Action Network ( ran.org ). 



We build a mirror site to their mailing action, 
so you can send a fax or a mail as same as RAN website. 

You can also participa^te to an automated flood of Oxy 
and CdnOxy servers, 

this part is independant firom RAN mailing project. 
FRA movement is entirely responsible for this flooding. 

- This action start on Feb 3th - 
TfflS ACTION WILL RESTART KEEP IN TOUCH 
Updated ffenquently this site is a temporary location 
Ask to webmaster for our real location. 


CHOOSE YOUR MENU 

corrected 04/02 - Mail O Matic and Fidelity 
updated 01/02 - Mail O Matic tool 
updated 01/02 - send ran letters bug corrected 
updated 31/01 - french statements availables 
updated 3 1/01 - Oxy Jscript flood with TicTacToy 
updated 21/01 - FI & Oxy Jscript flood search engines 
updated 20/01 - FI & Oxy Jscript interface possibility 
of scrolling 



Eight Arrested for Shutting down Gore's New 
Hampshire Campaign HQ 

Environmentalists Target VP for Ties to Oxy’s Colombia Oil 
Project 


* ACERCA * AMAZON WATCH * 

* NATIVE FOREST NETWORK * RAINFOREST ACTION NETWORK * 


For Immediate Release: January 26, 2000 

Contacts: Lauren Sullivan : 415/305-RAIN 
Steve Kretzmann: 510/551-7953 


Manchester NH - Eight environmental and human rights activists were 
arrested around 1:00 p.m. today for staging a sit-in at the Gore campaign 
headquarters in Manchester. Supported by dozens of demonstrators outside, 
activists engaged in civil disobedience calling on Gore to use his deep family 
and financial ties to Occidental Petroleum to block the company's planned 
drilling on the U'wa tribal lands in the Colombian cloud forest. 

The U'wa people, who are the legal owners of the land where Occidental plans 
to drill, are so opposed to the project that they have repeatedly stated their 
willingness to die defending their land from the oil project. Last week, a large 
number of Colombian troops were sent to secure this area so that Occidental 
can begin drilling. Yesterday, the Colombian Army forcibly evicted the U'wa 
from their land via helicopters. Three U'wa people are now reported 
missing. (U'wa Communique Jan 25 2000) 

Vice President Gore's ties to Occidental Petroleum have come under intense 
public scrutiny in recent weeks. Articles in the Financial Times. Time 
Magazine, Salon Magazine, and The Wall Street Journal have all questioned 
Gore's deep connections to Oxy. Gore holds some $500,000 in stocks and, 
and stands to reap large financial rewards if Oxy finds the 1.5 billion barrels 
of oil that the company estimates is under U'wa land. Oxy and its employees 
are also frequent and generous contributors to both the Gore campaign and 
to the Democratic party. 

"Gore can make the difference. He can save the U'wa and avert a public 
relations disaster for himself by intervening now," said Lauren Sullivan of the 
Rainforest Action Network. 

The conflict in Colombia is intensifying for the peaceful U'wa tribe. According 
to a communique issued by the U'wa people and information from the 
Colombian military, since January 19, at least 500 —and as many as several 
thousand— Colombian soldiere have been occupying an area of the traditional 
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Rainforest Ac^on Network: 


Eight Arrested...ing dowi^j^'s New Hampshire Campaign HQ http://www^j|^rg/ran/info_center/press_release/000 126_gore.html 


territory to which the U'wa have recently gained legal title. Yesterday, soldiers 
forcibly removed dozens of U'wa men, women, children, and elders who had 
been occupying the site since mid-November. 

"We prefer genocide at the hands of the Colombian government over 
relinquishing our Mother Earth to the oil companies," states the U'wa 
communique. U'wa leaders have vowed to continue to nonvioiently fight Oxy's 
efforts to drill on their iand. 

In recent weeks. Gore campaign offices have been flooded by calls of concern 
about Gore's connection to Occidental and the planned drilling on U'wa lands. 
Dozens of human rights and environmental organizations have sent letters to 
Gore, including the Sierra Club. Additional protests are planned at future Gore 
campaign stops in the coming days. 

U*wa Campaign 


Rainforest Action Network (RAN) works to protect the 
Earth’s rainforests and support the rights of their inhabitants through 
education, grassroots organizing and non-vioient direct action. 

©Rainforest Action Network, 2000. 


Refer this Page to a Friend 






2 of 2 


2/5/00 5:29 PM 



Rainforest Action Network: Fidelity Mutua,.. Over In 


lent in Colombian Oil Project 
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ran.org/ran/info__center/press__release/000203.html 



Fidelity Mutual Funds Hit by Protests In 20 Cities Over 
Investment In Colombian Oil Project 

In Campaign Launch Against Investment Giant, Supporters of 
U'wa Indians Demand Fidelity Divest from Occidental 
Petroleum Corporation if Drilling not Halted 

U'wa Were Removed Militarily After Occupation of Proposed Drilling 
Site on January 25, 2000 


RAINFOREST ACTION NETWORK * AMAZON WATCH 

For Immediate Release: February 3, 2000 

Contacts: Shannon Wriaht : 415/398-4404 
Dana Polk: 415/225-1946 

B-ROLL OF U'WA INDIANS AND OIL DRILLING AVAILABLE, SATELLITE 
UPLINK: Thurs, Feb 3, 13:00 - 13:30, 17:00 - 17:30 EST, Galaxy 6, 
Transponder 22, Vertical 4140 

Fidelity Investments was hit today by demonstrators at 20 of its offices across 
the country in a protest against the mutual fund giant's stake in Occidental 
Petroleum, which is set to drill on the lands of U'wa Indians In Colombia. 

Fresh on the heels of its victory against Home Depot, Rainforest Action 
Network (RAN), Amazon Watch and a coalition of environmental and human 
rights organizations are asking Fidelity to pressure Occidental to cancel the 
drilling project. If Fidelity refuses, RAN and Amazon Watch will begin a 
campaign asking investors to withdraw their savings and investments from 
Fidelity. 

Protests will take place in Atlanta, Boston, New York, Chicago, San Francisco, 
Los Angeles and other cities nationally and internationally. 

RAN and Amazon Watch targeted Boston-based Fidelity Investments because 
it controls more than 30 million shares of Occidental. This represents 
approximately $700 million - enough, RAN and Amazon Watch believe, to 
make Occidental listen. 

"Cash from Fidelity will be used to drill on U'wa land against the tribe's will 
and pollute tropical forests," said Lauren Sullivan of Rainforest Action 
Network. "As an owner of Occidental, Fidelity Investments can follow its 
pledge to 'invest responsibly' and prevent the drilling." 

The Colombian military began evicting the U'wa from their legalized, 
traditional lands for Occidental's Samore project in northeastern Colombia on 
January 25 in order to begin a major oil drilling operation. The U'wa consider 
the area, which includes intact Andean cloud forest and overlaps with the 
reserve, to be sacred ancestral territory. They recently purchased the land 
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Rainforest Action Network: Fidelity Mutua... Over In\^|^nt in Colombian Oil Project 


http://^J^.ran.org/ran/info_center/press_release/000203.html 


and are disputing the government's approval of a license for Occidental to 
drill there. 

"The region under contention has great significance as a U'wa sacred site." 
said Berito KuwarU'wa, spokesperson for the U'wa people, "The protection of 
this area adjacent to our reserve is fundamentally important to our way of 
life." --more-- 

In 1995 the U'wa leaders grabbed international attention when they 
threatened to commit collective suicide if the project was not stopped. In 
recent weeks the U'wa have repeatedly stated that they are willing to die to 
stop the project. 

Vice President Al Gore, who is a significant Occidental shareholder, has been 
shadowed during his campaign in New Hampshire by protesters urging him to 
put pressure on Occidental. Gore's Occidental stock holdings are valued at 
least $500,000, an amount that could grow considerably if Occidental 
expands its operations in the U'wa's land. 

"We are alarmed and concerned by the military operation underway on U'wa 
land, said Stephen Kretzmann of Amazon Watch. "We urge Occidental's two 
most important shareholders, Al Gore and Fidelity Investments, to act 
immediately to protect the U'wa." 

Millions of acres of rainforest each year are destroyed by the road building, 
colonization and pollution that come with oil and mining operations. 

Oil Is Colombia's largest export and has become a target in the civil war. In 
December, leftist guerrillas killed three policemen and ten civilians in the 
town of Cubara where the U'wa Traditional Authority's office is located. The 
Cano Limon pipeline owned by Occidental has been damaged over 600 times 
in the 13 years since it was built, according to Occidental's own records. 

These attacks have released over 1.7 million barrels of crude oil into 
waterways and soil just north of U'wa territory. In contrast, the U'wa's eight 
year struggle against the drilling has remained a peaceful one. 

"With oil operations comes destruction," said KuwarU'wa. "Each area of the 
forest that has been developed for oil has paved the way for civil war battles, 
causing great violence against people and our Mother Earth." 

Military units have been deployed by the government to protect oil facilities. 
According to the U'wa, the militarization has led to an increase in human 
rights abuses and the killing of unarmed civilians. The U'wa believe that 
development of the proposed site would compromise the tribe and the 
environment because it would increase oil-related violence between armed 
groups in the politically unstable region. 

"The truth here in Colombia is that the military is being used to suppress 
peaceful Indians and protect US oil companies," stated KuwarU'wa. 

U*wa Campaign 


Rainforest Action Network (RAN) works to protect the 
Earth's rainforests and support the rights of their inhabitants through 
education, grassroots organizing and non-violent direct action. 
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Action Alert Index 
I 


http://www.ran.org/ran/info_center/aa/index.html 


iRAh\*FOaa$T 



Current Action Alerts 


• Gore: Principles or Petroleum? 


Fidelity Investments: Investing in Genocide? 
WTO Threatens Democracy. Environment 


Oil Pipeline Threatens African Rainforest 


• Pristine Gabonese rainforest threatened h\ 


Geovic Mines Cameroon’s Rainforests 


Send All Current Action Alerts 

Select individual action alerts from the list above. 
Or, send all current action alerts using this form. 


Real 

Name 

E-mail 








(required) 


Send Alerts i 


Action Alert Archives 


Refer this Page to a Friend 
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Occidental Set, to Drill on Uwa Land 
r 


I http://www.ran.org/ran/info_ 


RAlNrORsST 

INFORMAnONv,. 



Action Alert 147: December 1999 


Occidental Set to Drill on U'wa 

Land 

US-based Occidental Petroleum Is 
moving forward with a massive oil 
project on the traditional territory of 
the U'wa, a five thousand member 
indigenous community in 
Northeastern Colombia. The U'wa are 
adamantly opposed to the Samore 
Block project, as it is known in the oil 
industry, believing that it will bring 
violence and environmental 
devastation to their homeland. 

The U'wa grabbed international 
headlines in 1996 when they vowed 
to commit collective suicide if the 
Samore Block project is not halted. 

Their message is clear: In the words 
of the U'wa, "We would rather die, 
protecting everything that we hold 
sacred, than lose everything that 
makes us U'wa." 

So far. Occidental has failed to hear the U'wa's message. Despite 
overwhelming local and international support for the U'wa, the project is closer 
than ever to becoming a reality. One of the final legal hurdles to the project 
was removed in September when Colombia's Minister of the Environment 
granted Occidental a permit to begin exploratory drilling on U'wa territory. 

In November, hundreds of U'wa Indians marched on the site of Occidental's 
first planned drill site, establishing a permanent settlement to block the drilling 
slated to begin in the coming weeks. The drill site is located less than six 
hundred yards from the legally-recognized U'wa Unified Reserve and clearly 
falls within the U'wa's larger traditional ancestral territory. The U'wa 
community of Santa Marta inhabits the area adjacent to the well site, putting 
them at clear risk from the impacts of the oil project. 

Occidental's Cano Limon pipeline in Arauca, Colombia, just north of the U'wa's 
territory, has become a national symbol of the link between oil, violence, and 
environmental devastation in Colombia. Once peaceful and sparsely-populated, 
Arauca has been torn apart by violence since the construction of the pipeline. 
The pipeline itself has been bombed nearly six hundred times and has spilled 
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http://www.seattlewto.org/n30/part/usa.html 
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\ 




USA 

Seattle, WA 

Anaheim, Ca 

Starts at Ball and Euclid at 2:30 p.m. march to 

katella and euclid then to Disneyland for ending 

demonstration, contact anok_1 @yahoo.com if you want more info. 

Atlanta, Georgia 

Contact: Katuah Earth First! 

billgorz@hotmail.com 

828-654-0446 

Austin, Texas 

Nov. 30th, Austin March and Rally by Just Say No To WTO Coalition! 

Join over a thousand Austinites, the Radical Cheerleaders, Giant WTO octopus, & 
marching band with Bastrop drummers at what promises to be the largest Austin 
demo. of the 1990's. The World Trade Organization (WTO) is attacking democracy 
& environmental, labor and human rights laws under the guise of trade 
agreements. We will gather at Republic Square (4th & Guadalupe) at 3pm, march 
at 4, and from 5-6:30 there will be speeches, song and street theatre at 1 1th and 
Congress. Among the speakers will be Rebecca Harrington of Texas AFL-CIO, 
Susana Almanza of PODER, Erin Rogers of Austin Coalition for Fair Trade, and Dr. 
Dick Richardson of UT. 

Call Jere Locke at 263-1883 or James Scott of Public Citizen at 477-1155 for more 
info. 

Boston, MA 

contact: United for a Fair Economy 

617-423-2148 x 24, 

e-mail: stw@stw.org 

or: Jobs with Justice, 524-8778, 

e-mail: bostonjwj@igc.org 

Baltimore, MD 

Contact: Jodie, 410-467-9388x7 
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» Forum : misc.activism.progressive 

» Thread : (en) [Colombia] URGENT I U'was land invaded 
byOXY 


Message 22 of 55 


Subject: (en) [Colombia] URGENT ! U'was land invaded by 
OXY 


Date: 

Author: 


01/23/2000 

el desaparecido < desaparecido@gmx.de > 
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Post Reply 
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Save this thread 

Subscribe to misc.activism.progressive 
Mail this message to a friend 
View original Usenet format 

Create a custom link to this message from your own Web site 
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Previous group * 


* Top of A San Francisco Bav Area Progressive Director 


project underground 


Address 1847 Berkeley Way 

Berkeley ^ CA 94703 
Voice (510) 705-8981 

Fax (510) 705-8983 

Email pro j ect undergroundOmoles . org 

Web http : / /www . moles . org 

Exposes corporate environmental and human rights abuses, and supports communites facing the mining 
and oil industries 

Index Keys 

corporations * environmental justice * human rights * land use * oil * World-Wide Web sites 
This entry was last verified in February of 1998 . 
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Occidental Set«to Drill on ITwa Land 

i. 


|ittp://www.ran.org/ran/info_center/aa/aal47.html 


close to two million barrels of oil into nearby rivers, lakes, and soil. 

Oil-related violence has already begun to spread to the heart of the U'wa 
community. In 1997, an U'wa leader was assaulted by hooded men who 
threatened to kill him if he didn't sign an "authorization form." In March, three 
American activists were murdered while in Colombia working with the U'wa. 
The U'wa fear that the assault and murders are a harbinger of things to come if 
an oil project goes forward on their land. 

The U'wa's campaign to halt the project has been steadily gaining momentum. 
Last year. Occidental's original partner in the Samore Block, Royal Dutch/Shell, 
pulled out of the project citing human rights and public relations concerns. And 
at Occiderital's Annual General Meeting this year, shareholders representing 
over forty million shares and eight hundred million dollars worth of stock voted 
in favor of a resolution asking Occidental to re-evaluate the project. 

Although Occidental is poised to begin its destructive project on the U'wa's 
sacred homeland, the U'wa are standing firm and support for their position has 
never been stronger. In the words of the U'wa, "We are all children of the 
Earth. Help us to defend her." 

What You Can Do! 

Fidelity Investments is one of the single largest shareholders of Occidental 
Petroleum stock. As a major owner of Occidental, Fidelity has the power to 
influence Occidental's business decisions. Please write to Fidelity's Chairman 
and urge him to use Fidelity's power and influence to bring an end to the oil 
project on U'wa territory. Write to Edward Johnson III, Chairman of Fidelity 
Investments. If you have investments through Fidelity and would like to get 
more involved, please contact our Beyond Oil Campaign Director at (415) 
398-4404. 

Follow these steps to send a message to Edward Johnson III, Chairman, 

Fidelity Investments from our site: 

1. Enter your personal information. Your email address is required. 

2. Enter a subject for your message. We have provided a default, but feel 
free to change it. 

3. Write your letter. We have provided a sample letter which you can send 
as-is or edit the text if you wish. 

4. Please don't forget to sign your name. 


Personal 

Information: 


Address: — 


Real Name: 
Subject: 




V, % Vi Vi i i i 

i Stop Occidental's Samore Block project! 




Irequired 


(optional) 
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Email Recipient: Edward Johnson III 


I Dear Mr. Johnson, 




^ I recently learned that Occidental Petroleum is moving forward 
I with the Samore Block oil project on the traditional territory 
^ of the U'wa in Colombia. As you probably know, the U'wa are 
I adamantly opposed to the project and have vowed to commit 
I collective suicide if it goes forward against their will. 

\ Fidelity is one of the largest shareholders of Occidental 
I stock, and as such has unrivaled power to influence 
^ Occidental's decisions. I urge you to do everything in your 
I power to stop this human and ecological travesty before it 
f takes place. 


\ If the Samore Block project goes forward, it will jeopardize 
I the lives of five thousand people and the health of a fragile 
^ forest ecosystem. The project will also have repercussions 
I that extend far beyond Colombia, as the U'wa have overwhelming 
I international support. 


\ As one of Occidental's primary shareholders. Fidelity has a 
I responsibility to take a stand on this highly controversial 
^ and potentially deadly project. Please let me know what steps 
I you plan to take to resolve this issue. 


\ Sincerely, 




Send Alert! f 


U'wa Campaign 


Refer this Page to a Friend 
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Bruce W. Scotton, M.D. 

70 Marina Vista 
Larkspur, CA 94939 
tel: 415 924-4428 
fax: 415 927-4858 
January 28, 2000 
email: bruce@itsa.uscf.edu 
Edward Johnson, HI 
Chairman, Fidelity Investments 
82 Devonshire St. 

Boston, Ma 02109 
DearLfr. Johnson; 

I write to you on a matter of the deepest concern for you as Chairman of Fidelity and for all of us, who are investors with you, as 
e^cal human beings. My family and I are long time investors with you, witli multiple accounts. We are collectively oxtremely 
dismayed to learn of the recent events at the Goliath 1 site of the Samore Block Project that Occidental Petroleum has begun in 
Columbia. No doubt you remember that Fidelity holds a high percentage of Occidental's stock and that the project I refer to has 
been in the world news because the Uwa Indian tribe, whose ancestral lands the project invades, have annoxmced they will 
commit mass suicide if the project proceeds. On Wednesday January 26, apparently at the behest of Occidental Petroleum, 
officers broke up the Uwa's long standing peaceful sit-in at the site. Three Uwa leaders have disappeared and must be presumed 
tortured and/or executed. Given the violence already committed and the very real possibility of the death of every man, woman, 
and child of the Uwa nation I ask you in the strongest possible terms to take any and every action you can to stop Occidental fixrm 
proceeding on this misguided course. There are human considerations which are simply more important than profit. 

This turn of events gives Fidelity a chance to assert leadership in an area highli^ted by the recent events at the Seattle World 
Trade conference, that is to show that global business can and will exercise reasonable restraint to protect the well-being of native 
peoples and ecosystems before those restraints are imposed fix)m the outside by force. It also allows Fidelity the opportunity to 
stand on the positive side of the next round of international publicity about the drilling site, publicity which is about to become 
considerable. Finally, compassionate action on Fidelity's part will allow it to keep the investments of many who, like us, are 
simply no longer willing to sit quietly while international business acts as though the well being of non-investors is simply 
beneath consideration. 

Thank you for your concern. I look forward to your actions in response. If you would also like to contact me about this issue I 
would welcome that. 

Sincerely, 


Bruce W. Scotton 
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Campaign Updates 


U*wa Campaign 

November 18, 1999 

Greetings friends and supporters of the U'wa, 

I need say little to add to the most recent U'wa communique since their 
words are far more powerful than mine. They have called for supporters 
to join them in their occupation of the drill site as well as to take action 
around the world to draw attention to this situation. As Occidental 
Petroleum, backed up by the Colombian military prepares to move into 
the drill site all of us around the world must stand in solidarity with them. 

Please take your solidarity to the streets. Organize a vigil, demonstration 
or direct action at the nearest Colombian consulate/embassy. Highlight 
America's role in financing the Colombian military. Reprint and circulate 
the communique below. Make your local press cover this issue by writing 
letters, articles and organizing solidarity actions. Harrass Al Gore when 
he makes campaign apperances about why he is accepting campaign 
contributions from Occidental. Get local associations, groups, unions or 
faith groups to pass a resolution in support of the U'wa. Incorporate the 
U'wa issue into your demonstrations against the WTO and corporate 
globalization on Nov 30 they are an incredible example of resistance from 
the frontlines of the global economy! 

Rainforest Action Network can provide hard copies of materials. (See the 
U'wa Campaign section of the site.) 

We are completing research on Occidental's shareholders and expect to 
have some additional financial targets that we can all put pressure on 
very soon. One of the biggest investors in Occidental Is Fidelity 
Investments. They have outlets in financial districts in many major cities in 
the U.S, Canada, Europe and Japan (usually ground floor, plenty of 
windows, high traffic locations). Take a look around your local financial 
district and see if you can find them. We will keep you posted on what we 
discover and potential actions we could demand Fidelity take on behalf of 
the U'wa. Let us know what you are planning in your area. 

In the spirit of the U'wa resistance, 

Patrick Reinsborough, 
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THIS STORY HAS BEEN FORMATTED FOR EASY PRINTING 


Fidelity a target in oil protest 

By Karen Hsu, Globe Correspondent, 2/4/2000 

B nvironmental and human rights groups yesterday demonstrated outside Fidelity 

Investments offices in Boston and 19 other cities to protest the mutual fund company's 
stake in Occidental Petroleum Corp., which plans to drill for oil on land claimed by the U'wa 
Indians in Colombia. 

The groups want Boston-based Fidelity to pressure Occidental to cancel the drillings and they 
have threatened to start a campaign to encourage customers to withdraw their money from 
the giant investment firm. 

In Boston yesterday, about 50 people rallied in the bitter cold as customers tried to enter 
Fidelity's Congress Street offices. At one point, the bomb squad was called after someone 
tried to handcuff a briefcase with a tape recorder pla 5 dng to one of the lobby doors. 

Other protests at Fidelity offices took place in Atlanta, New York, Chicago, San Francisco, 
and Los Angeles. Fidelity controls about 30 million, or about 8.5 percent, of Occidental's 
shares, the human rights and environmental groups said. 

In Prague, Geneva, and Tel Aviv, the protest groups demonstrated in front of Colombian 
embassies. 

The U'wa dispute the government's approval of a license for Occidental to drill for oil, 
Colombia's largest export, and have tried to block the drilling equipment. 

Last week, the Colombian militaiy began evicting a few members of the U'wa, a tribe of 
5,000 Colombian Indians, from their property to a military base as machinery tried to move 
in. 

The drill site is in an area of disputed land. Roberto Perez, the highest elected official of the 
U'was, says the site is about 1,600 feet from the tribe's reservation, but the Colombian 
government contends it is several miles away. Nonetheless, the area is considered part of the 
tribe's ancestral lands, Perez said in a telephone interview from Bogata, the capital. Perez said 
the tribe last year bought two farms on land that has become part of the drilling area. 

The U'wa have threatened to walk off a 1,400-foot cliff in the Andes in a mass suicide to 
protect the land they considered sacred. Their ritual chants reminisce a time, hundreds of 
years ago, when many Uwa jumped off a cliff to avoid enslavement by Spanish invaders. 
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"It is not only ecocide, but cultural genocide," said Dune Lankard, a protester in Boston who 
came from Alaska. Lankard, 40, is a commercial fisherman who fought for compensation 
when the Exxon Valdez oil spill ruined his Eyak people's lands. 

The protest was organized by Rainforest Action Network, Amazon Watch, and other 
organizations. Rainforest Action Network was effective last year in persuading Home Depot, 
the nation's largest retailer of lumber, to agree not to sell any wood from endangered forests. 

A Fidelity spokesman yesterday said the resolution of such disputes should be in the hands of 
the government. "The appropriate authorities of the world have the responsibility to address 
matters of this type. We would hope they would do so fairly and wisely on behalf of their 
citizens," said Vincent Loporchio, spokesman for Fidelity. "Our responsibility is to weigh the 
impact of these issues on behalf of our mutual fund shareholders." Occidental did not return 
phone calls. 

The activists have also targeted Vice President A1 Gore, whose Occidental stock holdings are 
valued up to $500,000. Those shares came from his father when he sat on Occidental's board. 

Simon BUlenness, senior analyst at Trillium Asset Management in Boston, a socially 
responsible investment firm with $600 million in client assets, said that both Fidelity and Gore 
could influence the petroleum company. 

"Both of them could easily pick up the phone and talk to the CEO of Occidental, which could 
send a very strong message that this project on LTwa lands is going to be counterproductive 
in the long term for Occidental," Billenness said. 

This story ran on page A16 of the Boston Globe on 2/4/2000. 

© Copyright 2000 Globe Newspaper Company. 
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U'wa Campaign 


The U'wa of the Colombian cloud forest are in a 
life-and-death struggle to protect their traditional 
culture and sacred homeland from an oil project 
slated to begin on their land at anytime. The U'wa are 
adamantly opposed to the drilling and warn that the 
project will lead to an increase in vioience as seen in 
other oil regions of Colombia. Despite this, Los 
Angeles-based Occidental Petroleum and the 
Colombian government continue forward with plans to 
drill. I 

indeed on January 25 of this year, the U'wa were | 

evicted from their lands surrounding the drillsite by the | 

Colombian military in coordination with Occidental 
Petroleum. RAN is focusing its efforts on two targets; 

Fidelity Investments, one of Oxy's largest 
shareholders, and Vice President Al Gore, also an Oxy shareholder with strong 
family ties to Occidental Petroleum. The U'wa have made a call for international 
support; now is the time for us to answer. Find out more about the U'wa people., 



Campaign News 


February 3, 2000 

Today is an international day of action for the U'wa. Citizens from around the 
world are focusing their efforts on Fidelity investments, encouraging them to use 
their power to stop the project on U'wa land! Read the press release! 

P!ease take action today! 


Fidelity: "Helping You Invest 
Responsibly" 

• Bloomberg: Fidelity, Gore Urged to Help Block 
Colombian Occidental Venture (2/2/00) 

• The Fidelity Connection: Action alert 

• Fact sheet: Fidelity Investments: Investing in 
Genocide? 

• Find the Fidelity branch nearest you 

Gore: The "Environmental" Vice President 
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Bloomberg: Fidelity, Gore 
Urged to Help Block Colombian 
Occidental Venture (2/2/00) 

Associated Press: Protesters 
removed from Gore 
headquarters (1/26/00) 

Press release: 8 arrested at 
Gore campaign HQ ( 1 / 26 / 00 ) 

Time Magazine: Drilling for Trouble: Should 
Gore Stop Oxy? (I/24/00) 

Financial Times: Gore attacked over Colombia oil project (I/20/00) 

The Wall Street Journal: Occidental and Oriental Connections ( 9 / 29 / 99 ) 
Reuters: Despite image, Gore has deep roots in oil industry ( 8 / 9 / 99 ) 
Gore: Principles or Petroleum?: Fact sheet and action alert 




U'wa Communiques 

U\/va denounce violent actors, call for general strike 

( 1 / 31 / 00 ) English | Spanish 

U'wa communique on the eviction from their lands 

( 1 / 25 / 00 ) English | Spanish 

U'wa Defense Working Group press release: 

Colombian Military Invades U'wa Tribe's Legal Territory 

to Protect Oxy's Oil Project (l/ 25 /oo) 

U'wa letter to Colombian President Pastrana (I/21/00) 
U'wa communique on the militarization of their lands 
( 1 / 20 / 00 ) English | Spanish 

News Archives 


Refer this Page to a Friend 
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What You Can Do 


Send letters from our website 


• To Edward Johnson, III, Chairman and CEO of Fidelity Investments, one 
of 0)^'s largest investors, asking that Fidelity divest from Occidental. 

• To Vice President Al Gore, who owns up to $500,000 in Occidental stock, 
asking that he use his influence to cancel the Samore block project. 

• To Occidental Petroleum's CEO, Ray Irani, urging that Oxy cancel their 
project On U'wa territory. 


You can send each one individually by clicking on the above links, or 
you can send all three automatically by filling out the following form: 



Come to Los Angeles 


Help staff campaign offices, organize and plug into local mobilizations 
targeting Occidental. 

Contact RAN's Los Angeles office 
310-392-7656 

bdoran@enviroiink.org 


or Amazon Watch 

310-456-1340 

asoltani@igc.org 

If You Own Shares in Occidental Petroleum 

Please call Amazon Watch at (310) 456 1340 or email 
amazon@amazonwatch.org. A shareholder resolution was 
submitted this past April 30th which received a 13% share of 
the vote (a huge percentage for shareholder activism!) A 
resolution will likely be submitted again next year. 

Stay Informed 
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fwa People 


http: 


Join the U'wa Defense Working Group list serve and receive 
.updates on the campaign: 



Other suggestions 

• Write letters to the editor of your local newspaper; 

• Organize a letter-writing party among your fHends or at your school or 
college to send as many of these letters as possible. 

If you have other ideas, or want to discuss draft letters, feel free 
to call us. Check our website for recent statements from the 
U'wa Defense Working Group for talking points. 

Start or join a Rainforest Action Group 

Join a network of grassroots groups working around the world 
on rainforest issues. 
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About the Campaign 


The Beyond Oil Campaign works to move society out 
of our devastating dependence on fossil fuels and 
into renewable energy options as a necessary step in 
saving the world’s last rainforests. The expanse of oil 
and gas projects, in rainforest areas opens up million 
of new acres each year to roads, colonization and 
pollution. What is more, rapid climate change, 
primarily from the excessive burning of fossil fuels, 
spells doom for forests as they cannot adapt to the 
weather changes and subsequently burn, deteriorate 
with changes in animal populations, or decay from 
excessive moisture. Through shutting down rainforest 
oil projects and galvanizing public concern over 
climate change's threat to foreste, the Beyond Oil 
Campaign offers the public, policy makers and 
industry a clear path towards a sustainable energy 
future. 

Currently, the Beyond Oil Campaign is focusing primarily on Occidental 
Petroleum's project on the ancestral land of the U'wa people, an indigenous 
people of 5,000 in the cloudforests of eastern Colombia. 

Find out more about the U'wa... 
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In the News 


Bloomberg: Fidelity, Gore Urged to Help Block 
Colombian Occidental Venture 

Manchester Union Leader: Gore Protesters Arrested 

Associated Press: Protesters removed from Gore 
headquarters 

Time: Drilling for Trouble: Should Gore Stop Oxy? 

Financial Times: Gore attacked over Colombia oil 
project 

Reuters: U'wa Occupy Oxy Site 

U'wa Defense Working Group press reiease: 200 
U'wa Assemble at Oxy Well Site to Block Drilling 

RAN/Project Underground press reiease: Guns and 
Oil for Colombia Spark Protests in Twenty-One Cities 
Around the World 

U'wa Defense Working Group press release: 
Colombian Government Report Confirms U'wa in 
Occidental Petroleum's Line of Fire 

The Wall Street Journal: Occidental and Oriental 
Connections 

Associated Press (AP): Colombia OKs hotly 
contested oil exploration near Indian tribe's lands 

U'wa Defense Working Group press reiease: 
Colombian President Pastrana Condemned for 
Granting Occidental Permit for Oil Drilling on U'wa 
Tribal Land 

U'wa Defense Working Group press release: 
Colombian Government urged to reject Occidental's 
license to drill on U'wa land 

Reuters: Colombia Indians to fight on against oil firm 

RAN press release: U'wa of Colombia Uphold 
Opposition to Ail Oil Drilling as Tribe Granted 
Expansion of Legal Territory 

Reuters: Despite image, Gore has deep roots in oil 
industry 


February 2, 2000 

January 27, 2000 
January 26, 2000 

January 24, 2000 
January 20, 2000 

November 17, 1999 
November 17, 1999 

October 12, 1999 

Octobers, 1999 

September 29, 1999 
September 21 , 1999 
September 21, 1999 


September 9, 1999 

August 24, 1999 
August 24, 1999 

August 9, 1999 
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n.org/ran_campaigiis/beyond_oil/news/mdex.html 


Rainfbresl’Aetlon Network: Beyond Oil Campaign 





The Wall Street Journal: U'wa Chieftans Carry 
Eco-Fight To Doorstep of Corporate America 

Associated Press: Colombian Indians dominate Oxy 
shareholder rpeeting, but resolution faiis 

San Francisco Chronicle: Colombia's U'wa indians 
Battling Violence, Oil Interests 

U'wa Defense Working Group press release: Major 
Step To Ending Oil Drilling In Rainforest Results From 
Oxy Shareholder Vote 

B Pacifica Radio, Democracy Now: The U'wa 
People and Occidental Petroleum 

Reuters: Colombia tribe threatens suicide over oii 
drilling 

U'wa Defense Working Group press release: Twenty 
Arrests in Public Outcry Against Oxy's Rainforest Oii 
Project 

Associated Press: Oil Companies Face Human 
Rights Abuses 

RAN Press Release: Occidental Oil Pipeline 
Bombings Sign of Tragically Misguided Development 
Model 

IPS: Oil Company Ignores Indigenous Rights in 
Colombia 

RAN/Project Underground Press Release: U'wa Still 
Threatened by Oil Project; Occidental's "Solution" All 
Spin 

Los Angeles Tinies: Occidental Agrees To Scrap Plan 
To Drill On Disputed Land 

New York Times ad: Why Occidental's oil project is a 
death sentence for the U'wa 

UK Guardian: Eco-Soundings 

Seattle Times: Indigenous people threaten mass 
suicide if oil company drills on their land 

UK Guardian: Cliffhanger 

Los Angeles Times and Adbusters Articie: Oil Giant 
vs. Mother Earth 

Los Angeles Times: Colombian Tribe Has Oxy over a 
Barrel 


June 7, 1999 
May 1,1999 
April 30, 1999 
April 30, 1999 

April 29, 1999 
April 29, 1999 
April 28,1999 

April 28, 1999 
April 1, 1999 

June 1, 1998 
May 28, 1998 

May 26, 1998 

April 19, 1998 

March 11, 1998 
October 17, 1997 

September 20, 1997 
June 20, 1997 

April 25, 1997 


For articles on the murder of Terence Freitas, Lahe'ena'e Gay, and Ingrid 

Washinawatok 

on March 5, 1999, please click here. 
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Raii^ore«t‘Ac<ion Network: 


Beyond Oil Campaign 



http:/j 




,org/ran_campaigns/beyond_ 


oil/news/index.html 
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Raing)ra^‘Arfion Groups 


ip://www.ran.org/ran_campaigns/rags/content.htm! 
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-302 (Re',;. 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 2/X4/ 00 


b6 

b7C 


The follow ingf 
interview ; I 


~|were also present auring OIe~ 


I telephone number 


telephone numbe 
telephone numberl 


5 


telephone number 

After being advisea or tne laenciry or 

interviewing agents and the nature of the inteirview, 
provided the following information: 


us: 


I I had been advised of the followincr informatio n by 

members of th ^ 1 

appr-r.-v-imal-tal^r qfi ntAml-xa-r!:! f-rnm T? AINFOREST ACT I ON 

NETWORK nrotested atl 



] The protesters had, a permxt trom tne city or bosron ana 


abided by protest rules. The RAINFOREST ACTION NETWORK protested 
=■1-1 I 


b6 

b7C 


b7D 


b7D 


b6 

b7C 

b7D 


Investigation on 2/ 4/ 00 ^at Boston, MA 


File# 288A-BS-8636Q 


SA 
by SA 


Date dictated 2 / 11/ 00 


b6 

b7C 


This document contains neither recommendations nor conclusions of the FBL It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 







FD-J02a (Rev, 10-6-95) 




FD^302a (Rei^ 10-6-95) 


288A-BS-86360 


Continuation of FD-302 of 


On 2/4/00 


The RAINFOREST ACTION NETWORK site, www.ran.org, xs not 
linked to the denial of service attack site. 





I Na claims of responsibility have been made to date nor 

has been contacted by anyone associated with the denial 

of service attack. 








(K/ai/iw) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence : 
To: 


PRIORITY 


Date: 03/22/2000 


From: 


Los Angeles 
Minneapolis 

Boston 
C-11 
Contact : 


Attn: NIPC Squad 

Attn: NIPC Squad 


SA^ 


617) 223-6384 


Approved By: 

Drafted By: 

Case ID #: 288A-BS-86360 (Pending) 


» — 


Title:, FEDERATION OF RANDOM ACTION; 

FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM - VICTIMS; 

IMPAIRMENT - DENIAL OF SERVICE 
- .^2/3/2000 

Synopsis: Leads set for Los Angeles and Minneapolis Divisions in 

captioned matter. 

Enclosures: Enclosed for Minneapolis Divisicm are two copies of 

a Federal Grand Jury Subpoena and one presenO^-tioii of evidence 
letter. 

Details: On 2/3/2000, an Internet denial/of service attack was 

directed at Fide lity Investments and Occ/dent al P e troleum ’s 
Internet web servers . The attack was i^ response to Occidental 
and Fidelity’s oil drilling and financing efforts in Colombia, 
and its effect on the native U’wa peome living in Colombia. 
Fidelity’s United Kingdom based Web ^d financial trading servers 
were disrupted as a result of the a^ack. 


The Internet activ^y against captioned victims was 
timed to coincide with physical -world protests on 2/3/2,0.Q0* 


Specifically, approximately 96 members supporting the,J^lNFOREST ' 
ACTION NETWORK'' protested ^ Fidelity’s Boston, MA Investor Center 
on 2/3/2000. 

TheLFEDERATIOKT OF RANDOM ACTION designed an Internet 
web site, accessible €& the public, which generated the denial of 
service attack. The ^te was hosted at several locations 
including :f 


The web site allowed a user to spawn 12 windows on their 


] 


b7D 




DB2 


b6 

b7C 


b6 

b7C 


b6 .| 

b7C 

b7D 



To: Los Angeles From: Boston 

Re: 288A-BS-86360, 03/22/2000 


computer, each of which then repeatedly sent web page search 
requests to the victim servers until terminated by the user, 
subsequent large volume of requests caused disruption to the 
victim servers . 


No claims of responsibility or other commu ni cat xon 
regarding the Internet-ba^d attacks was received byl 





'?‘o: 
Re : 


Los Angeles 
288A-BS-86360 



Boston 


, 03/22/2000 



LEAD (s) : 

Set Lead 1: 

LOS ANGELES 

AT LOS ANGELES. CA 

Conduct logical investigation and interview 

1^ r csiepnone nulnber 

^ [ regarding captioned Internet denial of service 

attach. OJDtaxn copies of Web server logs, if available, and 
damage estimate. 

Set Lead 2: 

MINNEAPOLIS 

AT MINNEAPOLIS. MN 

Serve the enclosed Fede ral Grand Jury Subpoena and 
^preservation of evidence letter to I I ^ 

I 1 Emphasize the scope of the preservation of evidence 

letter is broader than the subpoenaed information. 

Conduct logical investicration and inteirviewl I 

[referenced on enclosed subpoena. 

Set Lead 3 : 


b6 

b7C 


b3 


b3 


AT MINNEAPOLIS. MN 

Conduct logical investigation and interview persons 
identified in lead 1 above concerning their involvement with the 
denial of service attacks . Determine their involvement with the 
RAINFOREST ACTION NETWORK and FEDERATION OF RANDOM ACTION. 

Attempt to identify who is the author of the denial of service 
attack web page, and potential for any additional actions against 
victims . 


♦♦ 


3 



U.S. Department of Justice 



,/ 


Minnesota Advocates $6r Human Rights 
310 4th Avenue Soutl|l'^, Suite 1000 
Minneapolis, MN 


554 i5 


■ 


Dear Sir or Ma’ 



A ^iminal investigation is being conducted by the 
Boston Division of the Federal Bureau of Investigation into 
violations of Federal law. 


You are requested to retain all records, documents and 
information to include electronic communications, account 
records, connection log information, and automated number 
identification information which refer to: 


User assigned Internet Protocol address 209.98.162.228 
on 2/1/2000 from 16:56:14 PM EST until 16:58:53 PM EST. 


This preservation of evidence notice is given pursuant 
to Title 18 United States Code Section 2703(f) while our office 
obtains any additional required legal process . Should you have 
any questions, please contact Rnatn-n n-i v-i on Snacial^ Agent 

[telephone number 


b6 

b7C 


Sincerely, 


BARRY W. MAWN 
Special Agent in Charge 



b6 

b7C 


Supervisory Special Agent 




b6 

b7C 





U.S. Department of Justice 



. You are requested to retain all records, documents and 
information to include electronic communications, account 
records, connection log information, and automated number 
identification information which refer to: 


User assigned Internet Protocol address 


1/2.8/2000 from 13:19:33 PM EST until 13:23:25 PM EStT 


on 


b6 

b7C 


This preservation of evidence notice is given pursuant 
to Title 18 United States Code Section 2703 (f ) while our office 
obtains any additional required legal process . Should you have 
any questions, plea. se contact Bosto n Division Specia l Agent 

]telephone number 


b6 

b7C 


Sincerely, 


BARRY W. MAWN 

Special Agent in Charge 



b6 

b7C 


Supervisory Special Agent 


xmA-^s -U360 



OS 2. 




b6 

b7C 



U.S. Department of Justice 



In Reply, Please Refer to 
File No. 


Federal Bureau of Investigation 


One Center Plaza 
Boston, MA 02108-1801 
March 22, 2000 




Paci f ic_Ijnt:erne t ^ 

105 Wes^clay Street 
UiawycA ' 95482 


/ 

Dear Sir or Ma’am, 


A criminal investigation is being conducted by the 
Boston Division of the Federal Bureau of Investigation into 
violations of Federal law. 


You are requested to retain all records, documents and 
information to include electronic commtmications , account 
records, connection log information, and automated number 
identification information which refer to: 


User assigned Internet Protocol address , 
1/28/2000 from 15:00:28 PM EST until 15:10:00 PM EST . 


on 


b6 

b7C 


, This preservation of evidence notice is given pursuant 
to Title 18 United States Code Section 2703(f) while our office 
obtains any additional required legal process. Should you have 


an\r nnfi . contact ‘Ro.qtnn D-ivTfiion flnacial Aaent 


telephone number 


b6 

H7P 


Sincerely, 


BARRY W. MAWN 

Special Agent in Charge 


By: 


Supeirvisory Special Agent 


b6 

b7C 






b6 

b7C 




u. V- 

u.s. 



Department of Justice 



In Reply, Please Refer 
File No. 


Federal Bureau of Investigation 


One Center Plaza 
Boston, MA 02108-1801 
March 22, 2000 


Star Media Network 
29 W. 36th Street 
New York, Nif 100l8 



Dear SxT or Ma’am, 


A criminal investigation is being conducted by the 
Boston Division of the Federal Bureau of Investigation into 
violations of Federal law. 

You are requested to retain all records, documents and 
infoirmation to include electronic communications, account 
records, connection log information, and automated number 
identification information which refer to: 


User assigned Internet Protocol address] | 

on 2/3/2000 from 10:45:31 AM EST until 10:57:12 AM EST. 

This preservation of evidence notice is given pursuant 
to Title 18 United States Code Section 2703 (f ) while our office 
obtains any additional required legal process . Should you have 
any cmestions ; plea se contact Bosto n Division Specia l Agent 

telephone number | 

Sincerely, 


BARRY W. MANN 
Special Agent in Charge 


By: I 1 1 1 

Supervisory Special Agent 


b6 

b7C 


2 sir/ 






p3> 


hS 

hlC 
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U.S. Department of Justice 



In Reply, Please Refer to 
FUe No. 


XICOM Netwc^ks, Inc. 
3 10 G plds^th Lane 
Newark, DE 19702 


DearLSir or Ma’am, 


Federal Bureau of Investigation 


One Center Plaza 
Boston, MA 02108-1801 
March 22, 2000 


A criminal investigation is being conducted by the 
Boston Division of the Federal Bureau of Investigation into 
violations of Federal law. 


You are requested to retain all records, documents and 
information to include electronic communications, account 
records, connection log infomnation, and automated number 
identification information which refer to: 


il — User assigned Internet Protocol address 

on 2/3/00 from 11:51:57 AM EST - 11:53:12 AM EST. 


jPser assigned Internet Protocol address 
on 1/28/00 from 13:39:08 PM EST - 13:45:44 PM EST. 


This preservation of evidence notice is given pursuant 
to Title 18 United States Code Section 2703 (f ) while our office 
obtains any additional required legal process. Should you have 
any questions, ple ase contact Bogton ni v-i .«=!-i on Sr><=>n-i Agent 

telephone number 


Sincerely, 


BARRY W. MAWN 
Special, Agent in Charge 


By: I 

Supervisory Special Agent 
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( 12 / 31 / 19 !^) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 

To: Minneapolis 

Norfolk 
San Francisco 


Date: 04/12/2000 


Attn: 

Attn: 

Attn: 


NI PC Scniad 
SA 


NIPC Squad 
NIPC Squad 


b6 

b7C 


From: Boston 

C-11 
Contact: 


SA 


Approved By: 
Drafted By: 


Case ID #: 288A-BS-86360 (Pending)- 




Title: FEDERATION OF RANDOM ACTION; 
FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM - VICTIMS; 
IMPAIRMENT - DENIAL OF SERVICE 
02/03/2000 


GRAND JURY MATERIAL - DISSEMINATE PURSUANT 


Leads set to inteirview witnesses an 


Synopsis : 
subjects . 

Enclosures : 

Divisions are Grand Jury 


Enclosed fo r- Norfolk. 


t 


Mlnneapo 



RULE 6(e) 


.s, and San Francisco 
captioned matter. ^3 


Details: On 2/3/2000, an Internet denia^^of service attack was 

directed at Fidelity Investments and Occidental Petroleum’s 
Internet web servers . The attack was iA response to Occidental 
and Fidelity’s oil drilling and financing efforts in Colombia, 
and its effect on the native U’wa peome living in Colombia. 
Fidelity’s United Kingdom based Web ^d financial trading servers 
were disrupted as a result of the atztack. No claims of 
responsibility or other communication regarding the Internet - 
based attacks was received by Fid^ity. 

The Internet activity >against captioned victims was 
timed to coincide with physical^ world protests on 2/3/2000. 
Specifically, approximately 9y members supporting the RAINFOREST 
ACTION NETWORK protested at ^delity’s Boston, MA Investor Center 
oiT27372'000. / 

The FEDERATION GF RANDOM ACTION designed an Internet 
web site, accessible to pne public, which generated t he deni al of 
service attack. The s^p^e was hosted at the following | 


The web 



/ 6 > 




b7D 


b6 

b7C 



Minneapolis sWm: Boston 

28^A-BS-86360, 04/12/2000 


site allowed a user to spawn 12 windows on their computer , each 
of which then repeatedly sent web page search requests to the 
victim servers until terminated by the user. The subsequent 
large volume of requests caused disruption to the victim servers 


this matter due to the short 
activity. 


is considered a witness in 
iuration of the denial of service 


Followincf receipt of a Grand Jury subpoena 




Minneapolis ETOin; Boston 
28ffA-BS-86360, 04/12/2000 


riter was contacted by | | who advised she will be 

address until 5/9/00. After 5/9/00 , she can be 

I telephone number ' 


Writer was also contacted by 


'teTephohe^ number 


[regarding this 

matter . Both 

were advised 

would 

likely be interviewed 

regarding this 

matter. 








^o: 
Re : . 


Minneapolis 

288^-BS-86360 




3m : Boston 

, 04/12/2000 


LEAD (s) ; 
Set Lead 1: 


MINNEAPOLIS 


AT MINNEAPOLIS. MN 


[ 


Locate and interview the client of attornevT 


telephone number 

regarding captioned matter. 


cell phone number] 

it] 


1 


b6 

b7C 


Conduct logical investigation and 
determine the extent of his/her involvement, association with 
other individuals in this matter, how he/she became aware of the 
web site, the author of the web site, and any plans for future 
denial of service attacks . 


Set Lead 2 : 


NORFOLK 


AT WILLIAMSBURG. VA 


Interview 


1 

1 telephone numper l 


regarding capti oned matter, and obtain any additional information 
regarding listeq 


b6 

b7C 


Set Lead 3 : 


AT WILLIAMSBURG. VA 
T,onat-.ft and inherview f 


I 


I, regarding captioned matter, conduct xogicax xnvest.xganion 
and determine the extent of her involvement, association with 
other individuals in this matter, how she became aware of the web 
site, the author of the web site, and any plans for future denial 
of service attacks . 


Set Lead 4 : 


b6 

b7C 


AT WILLIAMSBURG. VA 


Locate and interviewl 


regarding captioned matter. Conduct logical investxgatxon and 
determine the extent of his involvement, association with other 


4 





-5To: Minneapolis FTCm: Boston 

Re:. 28S:A.-BS-86360, 04/12/2000 


individuals in this matter, how he became aware of the web site, 
the author of the web site, and any plans for future denial of 
service attacks . 

Set Lead 5: 

AT WILLIAMSBURG. VA 


Locate and interview 


regaraing capcionea macfer. Conduct logical investigation and 
determine the extent of his involvement, association with other 
individuals in this matter, how he became aware of the web site, 
the author of the web site, and any plans for future denial of 
service attacks . 

Set Lead 6 : 

SAN FRANCISCO 

AT URIAH, CA 


Locate and interview] , , 

I ~ I residential address i r 

captioned matter. 

Conduct logical investigation and determine the extent of her 
involvement, association with other individuals in this matter, 
how she became aware of the web site, the author of the web site, 
and any plans for future denial of service attacks . 


♦♦ 
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(12/31/1995) 


• • 

FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/12/2000 


To: Boston Attn: SSA 


From: Boston 



b6 

b7C 


Case ID #: 288A-BS-86360 (Pending) 

Title: FEDERATION OP RANDOM ACTION; 

FIDELITY INVESTMENTS,. 

OCCIDENTAL PETROLEUM - VICTIMS 
IMPAIRMENT - DENIAL OF SERVICE 
02/03/2000 

Synopsis: Request opening of Federal Grand Jury sxibfile. 

Details: Writer requests opening of Federal Grand Jury subfile, 

named SUB FGJ, in captioned matter. 


♦♦ 





FEDERAL BUREAU OF INVESTIGATION 


Precedence; PRIORITY 

To; Boston 

From; Minneapolis 
Squad 5 
Contact ; SA 


Approved By; 
Drafted By; 


Date; 04/14/2000 


Attn; SA 


B12/376-3317 


Case ID #; 288A-BS-86360 (Pending) 




Title; FEDERATION OF RANDOM ACTION; 
FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM - VICTIMS; 
IMPAIRMENT - DENIAL OF SERVICE 
2/3/2000 


b6 

b7C 


Synopsis; Lead covered. 

Reference; 288A-BS-86360 Serial 6 

Enclosure (s) ; Return of executed subpoena served to 


b3 


Two 


cn-m.R.q n1- wri^P-nn nf i TTFnrmab i nn . r-P^gT-inrigi hr. 1-h(=> gnb-nrxaria 

td 


Details; On 03/30/2000, writer served a subpoena to 


b3 


[ 


04/05/200 0T 


l~~0rr 


suopoena for 
Minneapolis OEEICS . 


fa xed a write-up of information responsive to the 


to the 


On 4/11/2000, writer contacted SA 


Jconf irming 


b6 

b7C 


that all leads regarding the referenced file and serial had been 
covered . 


♦♦ 
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FEDERAL BUREAU OF INVESTIGATION 


residence 


by agents 


ojE ~hi irf- 


j: 


Date of transcription 

I 


05/24/2000 


place of 


latfcornev.l I place of bus 1 ness f 

phone number 1 


was contacted 
Present with 


] After being advised of the identic 


agents and the nature of the interview, 
following information: 


^ the interviewing 
provided the 


I I accesses the Internet very infrequently. 


not familiar with the term "denial of service", nor does [ 
how a denial of service works. | [ recalls the name Fidelity 

Investments and Occ idental Petroleum in relation to the U’wa 
people of Colombia. | believes that t he U’wa are being 


is 
TTcnow 


received an electronic 
of the U’wa and 


displaced by Occidental Petroleum, 
mail (e-mail) that dealt with the pliqhC 
Occidental Petroleum sometime around the beginning of Februa ry, 
2000, but did not recognize the sender of the e-mail. | | did 

not keep the e-mail. 


[ 


a admits that | | may have visited the Fidelity 

Occidental Petroleum web site but is not sure. 


Inves tments anc 

I I was unfamiliar with the names Federat ion of Random Action or 

the Minnesota Advocates for Human Rights. I I does not 


recognize www.lamtar.com. 


does not subscribe to any 


services that generate e-mails relating to the U’wa or similar 
issues . 


b6 

b7C 



b6 

b7C 


b6 

b7C 


302 


b6 

b7C 


Investigation on 05/24/2000 a t Hayward, CA 
File# 288A-BS-86360 


(telephonically) 


Date dictated 


by Sd 


This docuii 



SA 



Is the property of tlie FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. 
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(Rev. 10-01-1999) 

FEDERAL BUREAU OF INVESTIGATION 


Precedence ; ROUTINE 
\/to: 


Boston 


From: San Francisco 

14B/Hayward RA 
Contact; SA| 


Approved By: 
Drafted By; 


Attn; 


Case ID #; 288A-BS-86360 ^'V^^ending) 


Date; 05/2 4/2000 

saI 


}510) 583-5242 


b6 

b7C 


Title; FEDERATION OF RANDOM ACTION; 
FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM-- VICTIMS; 
IMPAIRMENT - DENIAL ' OF SERVICE 
02/03/2000 


Synopsis; To report interview on 
of referenced EC. ^ 


covering Lead 6 


b6 

b7C 


Reference; 288A-BS-86360 Serial 12 


Enclosures; FD-302 report of interview with 
original notes . 


and 


Details : 

An attemot was made to contact 


, d.o.b. 


1 in person 

. Due to 

-rp^mni 

:e location of 


|residence, I 


and the uncooperativi 

5 nature of neiahbors . 


personal contact was impossible , 
teleohonicallv at the office of her attorney. 


was cant acted 


Results of the 


interview are contained in the enclosed FD-302. 


San Francisco considers Lead 6 of the referenced EC 


covered . 


b6 

b7C 


♦♦ 
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FD-302 (Rev. 10-6-95) 


- 1 - 

FEDERAL BUREAU OF INVESTIGATIC 



Date of transcription 05/02/2000 


Social , _S,ecuritv ...Acc,ount_Njinib,ejj~ 


date o f birth 

home_addr e s si 


I was interviewed at ms 


b6 

b7C 


place of employmentT 


After being advised of the iden tities of 

the interviewing agents and the nature of the interview. 


provided the following /information: 





On February 3, 2000, a Denial of Service (DOS) attack 
occurred on Occidental Petroleum's Internet web server. This DOS 
attack was carried out bv several i ndi viHuaTs . some of whom are 


Internet 


Af^r checking, | 

rider (IP) addresses of the machines involved in the 


was able to determine the 


attacks arm the identities of the[ 
addressee 


associated with the IP 


b6 

b7C 


b6 

b7C 


Those 


are identified as follows : 


. Social Security Account Number (SSAN) 

residing at I 


b6 

b7C 




A ^ A 




1SSAN 


residing at 


stated that after these 


were identified. 


they were each called into his office and questioned concerning the 
DOS attack on Occidental Petroleum's Internet server. 






Investigation on 04/27/00 


File # ^ 


File # 2^88A-BS-8636 
SP. 

SP 


by 


Ml 


b6 

b7C 


at WilliamsburcT, VA 


Date dictated 04/28/OQ 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 









FD-302a (Rev. 10-6-95) 


288A-BS-86360 


Continuation of FD-302 of 


, On 


04/27/00 


.Page 



stated that each! 

indicated that 

about the DOS attack from a| 



They also informed 
tnat they received "Lamtar's" URL from this organization 


called 


also. ''Lamtar" was the site the[[ 


2 were told to go to for 


instructions on conducting the "virtual set-i n" on Occ idental 
Petroleum and Fidelity Insurance's websites. stated that 

these P I informed him that they were not aware of the 

implications of what they were doing, nor were they aware they were 
committing a Federal offense. 
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EP^302 (Rev. 10-6-95) 


FEDEKAL BUREAU OF INVESTIGATION 


transcription 


05/04/2000 


Social Security Acco\xiar€ Nuttiberr 


I of hi-rh h 

I 


residence I 




number 


b6 

b7C 


home^ad dr e s s i s I 

te]^ephpne_numbe^ 


Tand he re'^ides at this ■ address withf 
I was interviewed at theT 


[ 


aurm 




]inteirview was[ 


1 Presen t 


] After being advised of the id 


agents and the nature of the interview, 
following information: 


entitie s of bhe interviewing 
pided the 


friends , 


of tne 


stated that he is 



/I,:) 


~l. ^^ng w ith severa l 
I named the 


is part or tne 


Pa-infnT-est Action Network, a nonprofit organization. He stated the 


If g g gg gn environmental watchdog group. 

He indicated that after attending a re^nt meeting, the topic of 
conversation centered around oil exploration 

in Columbia, South America. He ind^ated the exploration efforts 
were destroying the environment, ana it was having a negative 
impact on the native U'wa people Wno are natives to Columbia. He 
stated that at the conclusion of/the meeting, it was decided that 
they would participate in a "vi/tual sit-in" of Occidental 
Petroleum's website. 


_ _ stated that /L amta r ' s URL was provided t o them at 

the I ~| 'meeting. He stat 9 u that upon returning to his 


he attempted to log onto t/he website but was unsuccessful! He 
repeated his steps and w^ successful . After reviewing the 
specific details from the URL, he knew the "virtual sit-in" would 
affect Occidental Petroleum and F idelity I nvestments . 


on 


the 


I 

followed An 


and e-mail pages) . 





t^-that he, along witq ^ 

ructions provided on the web page and clicked 
' for all (meaning Occidental and Fidelity's web 
He indicated that he knew he was flooding 


File# 288A-BS-86360 

Date dictated 05/03/2000 

SA 
by SA 
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288A-BS-86360 


Continuation of FD-302 of 


, On 


04/27/2000 


Occidental ' s s erver bv clicking on tfci( 
that he did hid 



"wash button. " He stated 

1 computer the same as he 


did his own by clicking the "wash/button. " 


and went to 



.Stated th^ upon doing that, he left , 

I He diclxiiot return for approximately two or 
three hours, at which time, he logged off of both computers. He 
stated that he knew the process was ongoing until he logged off. 
HP indic^ tad that he logged out of his system first and then 
system. 


stated during his interview, if he had known it was 
illegal, he would not have done it. He stated that he would have 
found another form of protest against Occidental and Fidelity. 


b6 

b7C 


b6 

b7C 

b6 

b7C 


b6 

b7C 




FEDERAL BUREAU OF INVESTIGATION 


1 Social Security Account Number [ 


Date of transcription / 05/04/2000 
~] dat e O/t birth'^ 


1 IteLechone number ■' 


Inome address is 



[telephone number 

and 




"I Present during the int;,erview was 

* I H t Z J _ ! 


] After b4ing advised of the 
identities of the interviewing agents the nature of the 

j _ _ j ! I I ! j 3 j_T n : ^ ^ ^ ^ J ^ « - 


xntehview. 


provided the following information: 


stated that he and o€her[ 


f called 


Dof a 


wPT-p am'naTtn nart ioxnate in 
scacea mat his 


sit-in. " He 
encouraged him to participate' 


"virtual 
lalso 
He 


in' tne "virtual sic-in. 

indicated the sit-in was in protest against Occidental Petroleum 
Corporation's oil exploration/efforts in Columbia, South America, 
and the negative impact it w^ having on the native U'wa people. 
He indicated that instructigms on how to proceed with the sit-in 

was ob tained from I ^ I | who is 

also af [ HA vnmcar.pn r.h? 


HA vnmca r.An T^at 


jaeeting what IP 


I I informed everydhe that attended the 

address to go to for instructions on how to participate in a 
"virtual sit-in." / 


web address they were 

on the "virtual sit-^n." ^ 

• ! j T i_T ' 


just going to log onto their website at a designated time to show 
their opposition Occidental and Fidelity's exploration efforts. 


[ 


Tstated that 


gave him brief 


b6 

b7C 


ated that "Rainforest Action Network" is the 
ins tructed to go to for specific instructions 
] stated that he thought they were 


b6 

b7C 


b6 

b7C 


instructions on Mow to complete the "virtual sit-in." 


b6 

b7C 


further stated that he thought the protest was 
against Occlcie]^tal Petroleum Corporation and did not know that it 
also involved /Fidelity In vestments . He indicated that he only 




Investigation on 


File# 28»A--RS-Rfi3fiO 
SA 
by SA 


04/27/2000 at Williamsburcf , Vircrinia 

Date dictated 05/01/2000 
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288A-BS-86360 


Continuation of FD-302 of 


04/27/2000 _2 


found this out after attending an 


in which 


another protest was being planned against Fidelity's local banking 
office . 


stated that if he had known earlier, he would not 
have participated in this action against Occidental Petroleum 
Corporation and Fidelity Investments. He indicated he would have 
found other means to vo ice his protest against Occidental ' s oil 
exploration practices . I I stated he would not become involved 


in anything like this again. 


b6 

b7C 


b6 

b7C 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 05/ 05/2000 


1 , 1 date of 


1 Social Securitv Account Number 

J 1 1 

L 1 

Iteleohone number 


1 home adf^rpBB n b I | 


J telephone number are 


After being advised of the 


interview, 


club located on thef 


provided the following information: 

belongs to an environmen tal 


indicated that 

I I _ 


of the 


indiflatsci tns instructiont; dn how 


to log onto tne wet> ana partxcipate in the "virtual sit-in" 
provided to 


was 


and other organizations oi| | inaicacea cnac cne oniy 

organization on campus that she could think of that was also 
provided instructions on how to participate in the "virtual sit-in" 
was the Hispanic Cultural Organization. 


stated the information provided Lamtar's URL 

which was used to facilitate the "virtual sit-in" on Occidental's 
and Fidelity's systems. 


b6 

b7C 


indicated that | | followed the instructions 

clicked' on the proper bu ttons as instru cted, and started 

' ] ind icated | | thought that 


provided, _ ^ ^ 

the sit-in at the designated time. [ 


clicked on "Occidental Canada" but 


was not sure . 


[ 


] indicated that the "virtual sit-in" was scheduled 


a designate d tim e and would last approximately two 

comp uter and followed 


to star 

hours. stated that | | logged ontof 

the instructions at a designated time, 1 


_ ^1 I system running, and 

went to I I I l in dicat ed that | | came back appro ximate ly two 

hours later and closed O browser out, thereby ending | | 

participation in the sit-in. 


stated that 


icon and not the Fidelity icon tfiat was showing 


only clicked on the Occidental 


Investigation on 04/27/2 000 Williamsburg, Virginia 


File # 2 ^ 

SA 
by SA 


Date dictated 05/03/2000 
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it and its contents are not to be distributed outside your agency. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 





FD-302a(Rev. 10-6-95) 


288A-BS-86360 


Continuation of FD-302 of 


,On 


04/27/2000 


.Page 


if I [ knew that 


] stated that] | did not know it was illegal, 
it was ,1 I would not have done it . 


1 ni^-i -nagni hg of the sit-in Were not 

discussed at follow-up 


2 


and 



WILLI. "'’’ POLICE D ~ 

SUPPLEMENTAL NARRATIVE 


PRINT DATE 
02 / 10/2000 


INCIDENT NUMBER 
200002030055 


02/03/2000 


ASSISTING 0FFICSR/3ADGS 


INVESTIGATING OFFICER/BADGE 


PRINTS FOUND? PHOTOGRAPHED? EVIDENCE OBTAINED? 

No Mo Mo 


NARRATIVE INCLUDES 


NARATivE: Nature of complaint: Computer Incident, Denial of Service Attack (E-mail Bombing) 

Location of incident: * 

Details of investigation; On Thursday February 3, 2000 I received a call from □ 

^concerning a reported Denial of Service Attack again 



and I I I requested 

from them copies of the email that was sent to their system with the header expanded. 
They responded as requested. What was found was that in the copy they sent, it had a 
different IP addr ess than that which was originally reported. This IP was 

I advised them of this and they then forwarded the message from the 

original complaint . 











PRINT DATE 
02 / 10/2000 


WILLIAM & MARY POLICE 

bjSLEMENTAL NAHI^TIVE 


INCIDENT NUMBER 
200002030055 



02 / 03/2000 






(Rev. 10-01-1999) 
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FEDERAL BUREAU OF INVESTIGATION 


\) 


Precedence: ROUTINE 

To : Boston 


Date: 05/26/2000 

Attn: Squad C-11 


From: 


ITOTTETTXTt 

Squad 3 

Contact: 


SA 


Approved By: 
Drafted By: 


(^ 17 ) 223-6384 


(757) 455-2667 


Case ID #: 288A-BS-86360“"^'‘' (Pending 


Title: FEDERATION OF RANDOM ACTION; 

FIDELITY INVESTMENTS, 
OCCIDENTAL PETROLEUM - VICTIMS 
IMPAIRMENT - DENIAL OF SERVICE 
02/03/2000 

Synopsis: Completion of lead. 


[ 


Administrative; Interviews oC 


1 


] concerning Denial of Service yfDOS) attack directed at 


Fidelity Investments and Occidental Petroleum's Internet web 
servers , 

Enclosures : E nclosed are original/and one copy of FD~302 s^q£. 

1 nt^-rvi Aw.ct W1 hhf ' 


b6 

b7C 




enr1n)=!Pd is a copy of 


■i/no n-F-F-i r^or-' 


police report . 


z 


J an^ 


Also 


Police Officer 


Details: At the time 

interviewed, it was this writer's opinion that] 
were both candid and frank /Y This writer feels^ 


I were 


of the DOS attack. Even tho ucfh 
candid, this writer believes 
was minimal. 


1 however. 


was somewhat evasive and :^t co mpletely candid in | [^ nopsis 


]was not completely 


overall role in this offense 


b6 

b7C 


Norfolk considers this lead covered. 


♦♦ 


b6 

b7C 


b6 

b7C 


diSr/9-^ 




(12/31/1995) 


• • 

FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 

To: Boston Attn; 

From; Boston 

C-11 

Contact; SA^ 


Date; 06/19/2000 


SSA 


x6384 


b6 

b7C 


Approved By; 

Drafted By; 

Case ID #; 288A-BS-86360 (Pending)’ 


Title; FEDERATION OP RANDOM ACTION; 
FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM - VICTIMS; 
IMPAIRMENT - DENIAL OF SERVICE 
2/3/2000 


Synopsis; Request case be reassigned to SA 


Administrative; Reference conversation between writer and SA 


Details; Writer requests case be re-assigned to SA 
effective 06/26/2000. 
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FEDERAL BUREAU OF INVESTIGATION 
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(Rev. 10-01-1999) 


% 


Precedence: ROtJTINE 

To t Boston 


Date: 08/23/2000 

Attn: C-11 

SA| 1 


From: 


Minneapolis 
Squad 8 
Contact: 


SA 


612/376-3317 


Approved By: | ] 

Drafted By: 

’ /, 

Case ID #: 288A-BS-86360'^^(Pending) 


b6 

b7C 


Title: FEDERATION OF RANDOM ACTION; 
FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM - VICTIMS; 
IMPAIRMENT - DENIAL OF SERVICE 
02/03/2000 


Synopsis : 


Lead from Boston to Minneapolis to interview 
~~1 covered . 


Reference: 288A-BS-86360 Serial 12 


b6 

b7C 


Details: On 06/21/2000, writer contacted|] 


who represents FNU LNU, alleged individual responsible for the 
02/01/2000 activity directed at Fidelity Inv estments . 


advised for the second time that[^ 


did not want to 


discuss the 02/01/2000 activity with the FBI. 


witness 
of service activit y fron[ 
location, 
writer tha 


that 


Writer advised 

and not a subje ct due to the short duration of the denial 


was considered a 




consulted with L 


J and again advised 


did not want to discuss the activity. 


In view of above, if appropriate Boston may consider 
AUSA opini on regarding issuance of Federal Grand Jury Subpoena as 


to FNU LNU 
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b3 

b6 

b7C 


b3 

b6 
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To: 
Re : 


Boston From: 
288A-BS-86360 




inneapolis 

08/23/2000 


LEAD(s) : 

Set Lead 1: 

BOSTON 

AT BOSTON. MA 

Lead left to the discretion of 00 regarding 
consultation with AUSA regarding FNU LNU testimony. 




Investigation on 10/ 05/ 00 ^at BOStOIly MA 



This document contains neither recommendations nor conclusions of the FBI. 
it and its contents are not to be distributed outside your agency. 
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Thft following investigations were conducted by SA 


On 04/11/2000, the inveatiaatina aap-nt t-o 



<■> 0 , 


(Rev. 10-01-1999) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence; ROUTINE Date; 12/29/2000 


To; Boston Attn; S A | 

Squad C-11 


From; Los Angeles 



Case ID #; 288A-BS-86360 (Pending) 


Title; FEDERATION OF RANDOM ACTION; 
FIDELITY INVESTMENTS, 

OCCIDENTAL PETROLEUM - VICTIMS; 
IMPAIRMENT - DENIAL OF SERVICE 

Synopsis; Lead covered. Interviewed ! 


b6 

b7C 


b7D 


Reference; 288A-BS-86360 Serial 6 


Enclosure (s) ; 


1 ) 

2) 

3) 

4) 


Th-r(=>(q noTvi <=»!=! nf Tn.qert for telephonic contacts 

with 

Threecopies of FD-302 tori \ 

Three copies of FD-302 for} ^ j 

FD-340 (lA) containxiig^ 1 


b6 

b7C 


b7D 


Details; Original lead set for Los Angeles recniested that! I 


be contacted reg arding the captioned Internet 
denial of service . Writer contacted I I and was red irected 
to contact C I 


Based on conversations with 
was able to obtain the following information : 


writer 


b6 

b7C 


3im- 





FEDERAL BUREAU OF INVESTIGATION 


FD-801 (Rev. 7-15-97) 


Precedence : ROUTINE 


Date: 02/06/2001 


To: Counterterrorism 


Attn: Computer Investigations 

Unit, Room 11887 
Computer Investigations 
and Infrastructure Threat 
Assessment Center 
(CID/NSD) 


From: SAC, Boston 


Approved By: 


Drafted By: 


Case ID #: 288A-BS-86360 


Title: Subject: 

Victim: 
Type : 
Date : 


FEDERATION OF RANDOM ACTION; 

FIDELITY INVESTMENTS, OCCIDENTAL PETROLEUM; 
DENIAL OF SERVICE 
02/03/2000 


SUBMISSION: □ Initial □ Supplemental X Closed 


CASE OPENED: 2/16/00 


b6 

b7C 


b6 

b7C 




CASE CLOSED: 

□ No action due to state/local prosecution (Name/Number ) 

X USA declination 

□ Referred to Another Federal Agency (Name/Number: ; ) 

□ Placed in unaddressed work 

□ Closed administratively 

□ Conviction 


COORDINATION: FBI Field Office Boston 

Government Agency 

Private Corporation 


VICTIM 


Company name/Government agency: Fidelity Investments 
Address/location: 82 Devonshire Street, Boston, MA 

Purpose of System: Web Server 

Highest classification of information stored in system: Unclassified 








hS 

hlC 





To: Count erterroriafR From: SAC, Boston 

Re: 288A-BS-86360, Date: 02/06/2001 


System Data: 

Hardware/configuration (CPU); 

Operating System: 

Software: 

Security Features: 

Security Software Installed: □ yes (identify ) □ no 

Logon Warning Banner: □ yes x no 

INTRUSION INFORMATION 

Access for intrusion: □ Internet connection □ dial-up number □ LAN (insider) 

If Internet: Internet address: 

Network name: 


Method: 

Technique(s) used in intrusion: Intrusion (list provided): DOS 

Path of intrusion: 

addresses:!. 

2 . 

3 . 

4 . 

country: 1. 2. 3. 4. 5. 

facility: 1. 

2 . 

3. 

4. 

Subject: 

Age: Race: 

Sex: Education: 

Alias(s): Motive: 

Group Affiliation: 

Employer: 

Known Accomplices: 

Equipment used; 

Hardware/configuration (CPU): 

Operating System; 

Software: 

Impact: 


2 




To: CounterterrorisTR From: SAC, Boston 

Re: 288A-BS-86360, Date: 02/06/2001 


Compromise of classified information: □ yes x no 
Estimated number of computers affected: 1 
Estimated dollar loss to date: 0 


Category of Crime: 

Impairment: 

□ Malicious code inserted 
X Denial of service 

□ Destruction of information/software 

□ Modification of information/software 


Intrusion: 

□ Unauthorized access 

□ Exceeding authorized access 


Theft of Information: 

□ Classified information compromised 

□ Unclassified information compromised 

□ Passwords obtained 

□ Computer processing time obtained 

□ Telephone services obtained 

□ Application software obtained 

□ Operating software obtained 


REMARKS 

On 2/3/00, Internet web servers belonging to Fidelity 
Investments and Occidental Petroleum were the targets of denial 
of service attacks . The attacks were against the search function 
of the company's web sites. The attacks originated from a site 
owned by the Federation of Random Action. The attacks coincided 
with physical world protests led by the Rainforest Action 
Network . 


The attack was in response to Occidental and Fidelity's 
oil drilling and financing efforts in Colombia, and its effect on 
the native U'wa people living in Colombia. Fidelity's United 
Kingdom based Web and financial trading servers were disrupted as 
a result of the attack. 


b7D 


The Internet activity against captioned victims was 
timed to coincide with physical -world protests on 2/3/2000. 
Specifically, approximately 96 members supporting the RAINFOREST 
ACTION NETWORK protested at Fidelity's Boston, MA Investor Center 


3 



To: Count erterroriwn From: SAC, Boston 

Re: 288A-BS-86360, Date: 02/06/2001 


on 2/3/2000. 

The FEDERATION OF RANDOM ACTION designed an Internet 
web site, accessible to the public, which generated the denial of 

service at tack. The site was hosted at several locations 

including :| 


No claims of responsibility or other commur 
regarding the Internet -based attacks was received by 


A search of 






To: CounterterroriSTFi From: SAC, Boston 

Re: 288A-BS-86360, Date: 02/06/2001 


The user of the] | is considered a witness in 

this matter due to the short duration of the denial of service 
activity. 


subooena 


SA ladviseq J is considered a 

witness in this matter due to the short duration of the denial of 
service activity. 

A third set of attacks oricrinated from three IP address 


liS8ECS3RS8ISHiH3l8SR I 


ismi 


I ■■ISKHSMMHHMKSlfSl 


information regarding the below listed] 

of service activity originated from the following: 


The denial 







To: Count ert err or iaff From: SAC, Boston 

Re: 288A-BS-86360, Date: 02/06/2001 



[ 


[ 


Agents o f the Norfolk Division. All 


Were in terviewed by FBI 


I 


]r»-F i-Vio omr-i T~f-.nmg.nha1 r^-rrtam' 1 ori on [ 


advised that they are 


b6 

b7C 

b7D 


b6 

b7C 


"virtual sit-in" that was organized by£ 


] called 


They par ticipated in a 


The 


instructed on how to perform the "virtual sit-in", put arc 
realize that they were performing Denial of Service attack 
against Fidelity Investments. 


were 

not 


1 1 date of birth 1 

place of 
was contacted 

residence 

by aqents of the P!bi . Present witnl 




b6 

b7C 


not 

how 


Jaccesses the Internet very infrequently. _[ 
familiar with the term "den|-aJ t~»|^ service", nor does 


know 

recalls the name Fidelity 


a denial of service works. 

Investments and Occidental Petroleum in relation to the U'wa 
people of Colombia. | | believes that t he U'wa are being 


IS 


b6 

b7C 


received an electronic 


displaced by Occidental Petroleum. 

e-mail Occidental Petroleum sometime around the beginning of 
Febru ary . 2000, but did not recognize the sender of the e-mail, 
did not keep the e-mail. 


admits that □ may have visited the Fidelity 


Inve stments and Occidental Petroleum web site but is not sure. 

I I was unfamiliar with the names Federati on of Random Action or 


b6 

b7C 


does not 


the Minnesota Advocates fo r Human Rights. 

recognize www.lamtar.com. | l loes not subscribe to any 

services that generate e-mails relating to the U'wa or similar 
1 (e-mail) that dealt with the plight of the U'wa and issues. 


On 11/02/00, AUSA I | declined 

prosecution due to lack of venue in the District of 
Massachusetts . 


b6 

b7C 


♦♦ 
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FD-542(Rev. 11-02-1999) 


♦ • 

FEDERAL BUREAU OF INVESTIGATION 


•Precedence: ROUTINE Date: 04/13/2001 

To : Boston 

From: Boston 


C-11 


Contact: SA 


Approved By: 
Drafted By: I 





Case ID #: 288A-BS-86360 (Closed) 

Title: FEDERATION OF RANDOM ACTS; 

FIDELITY INVESTMENTS, OCCIDENTAL PETROLEUM - Victims; 

DOS 

2/3/00 

Synopsis: To claim investigative stats with FD-542, 

Details: Investigative Accomplishments: 

See Serial (s) : 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, and 12. 
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To: Boston From: Boston 

Re: 288A-BS-86360, 04/13/2001 


Accomplishment Information: 


Number : 1 

Type: NIPCIP VICTIM CONTACTED/ INTERVIEWED 

ITU: AGENT INTERVIEW 

Claimed By^ 

SSN: 

Name : 

Squad : Cll 


Number : 1 

Type: NIPCIP SUBJECT TOOL/EXPLOIT/MALICIOUS CODE IDENTIFIED 

ITU: AGENT INTERVIEW 


Claimed By: 
SSN: 
Name : 
Squad : 


TJTT 


b6 

b7C 


Number : 2 

Type: NIPCIP FOREIGN SOURCE IP ADDRESS IDENTIFIED 

ITU: NIPCIP (Default) 

Claimed By 
SSN: 

Name : 

Squad 


TTT 


b6 

b7C 


Number : 5 

Type: NIPCIP 2703(d) Order Obtained 

ITU: NIPCIP (Default) 

Claimed By-: 

SSN:' 

Name I 
SquaoT 


■CTT 


b6 

b7C 


Number : 5 

Type: NIPCIP 2703(d) Order Served 

ITU: NIPCIP (Default) 

Claimed By 
SSN: 

Name : 

Squad 


i CTT 


b6 

b7C 


Number : 7 

Type: NIPCIP Subject Identified 

ITU: NIPCIP (Default) 

Claimed By^ 

SSN: 

Name : 

Squad 


"CTT' 


b6 
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To: Boston From: "Boston 

Re: 288A-BS-86360, 04/13/2001 




Number : 7 

Type: NIPCIP Subject Interviewed 

ITU: NIPCIP (Default) 

Claimed By: 

SSN: 

Name : 

Squad : 

♦♦ 
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(Rev. 08-28-2000) 


• # 

FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 


Date: 04/29/2002 


To: Boston 


Attn: 


ectF 


From: Boston 

C-11 

Contact : Si( 


Approved By: 


Drafted By: 


Case ID #: 288A-BS-86360 (Closed) 

Title: FEDERATION OF RANDOM ACTION; 

FIDELITY INVESTMENTS, OCCIDENTAL PETROLEUM; 

DENIAL OF SERVICE 

02/03/2000 

00:BS 


Synopsis: Writer request ECT destroy evidence associated 

with above captioned matter. * * 


Details: Writer request ECT 


destroy the 


following items associated with the above captioned matter: 


IBl 

E1548913 

1B2 

E1548975 

1B3 

E1548976 
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♦♦ 


UPLOADED 

-'ll ; M FXT \/ 


OU 

.Ti'Tr‘\rrr 
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